[noitemsep, nolistsep, leftmargin=*]
Vision: We evaluate on the CIFAR10 [1]} classification dataset. LTI attains recovery accuracy close to that of the best optimization-based method when no defense is applied, and significantly outperforms all prior attacks under defense.

NLP: We experiment with causal language model training on the WikiText [2]} dataset, where LTI attains state-of-the-art performance in all settings, with or without defense.

